Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Wp4dyL4VDkkIkeJ5ekJTuPeL3r4.roa
File: Wp4dyL4VDkkIkeJ5ekJTuPeL3r4.roa (raw, json)
Hash identifier: lVaJM/WxC1RGafO5UCPYMgQWeWizf8jfQMA74RvyD6g=
Subject key identifier: 5A:9E:1D:C8:BE:15:0E:49:08:91:E2:79:7A:42:53:B8:F7:8B:DE:BE
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 018F3E6EC11AEB8C37CB3E1A486DBDE1032B
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Wp4dyL4VDkkIkeJ5ekJTuPeL3r4.roa
Signing time: Fri 03 May 2024 12:29:56 +0000
ROA not before: Fri 03 May 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215568
IP address blocks: 2a13:cd40::/29 maxlen: 30
2a13:d340::/29 maxlen: 29
2a13:d840::/29 maxlen: 29
2a13:df40::/29 maxlen: 29
2a13:e140::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Jun 2024 13:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:6e:c1:1a:eb:8c:37:cb:3e:1a:48:6d:bd:e1:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: May 3 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9e1dc8be150e490891e2797a4253b8f78bdebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:17:1e:7a:cf:85:e3:7c:ca:78:9c:2d:f6:
e6:af:5f:ec:27:de:ce:83:6d:7f:0a:5d:35:6b:36:
45:20:55:97:5d:6c:d4:75:90:4f:8f:d5:9c:25:e4:
44:f5:55:31:36:97:d9:41:8f:94:da:fa:4a:94:a9:
21:18:16:00:ed:e3:06:ad:18:15:c2:40:60:c7:ac:
cc:f5:86:ea:64:cb:19:d6:b1:cb:dc:be:6f:04:80:
93:d6:2c:e0:a7:85:7d:9a:8b:66:43:58:34:ba:e1:
97:f6:64:56:f9:93:3d:e8:a9:1a:a4:5b:2a:50:09:
54:e8:d9:57:98:37:e5:6f:f5:01:d7:3e:cd:dd:04:
d0:2d:45:66:12:71:12:68:dc:b0:a9:dd:13:a1:f2:
4b:78:11:f9:05:6d:99:b4:3f:9c:48:9d:a3:56:09:
cb:47:73:f1:6d:2d:40:21:3c:dd:33:4d:93:3d:42:
48:55:ab:c1:a6:c8:e2:01:aa:78:b4:b8:ca:bb:d2:
76:39:fc:ca:4d:84:b9:80:53:26:a1:f6:fa:97:cb:
66:aa:a0:67:db:37:63:b7:15:31:01:47:5c:0f:7b:
e9:00:61:85:a8:c6:d6:dd:98:d5:39:2e:7c:a4:84:
c1:da:5d:54:a8:b9:28:8f:14:ea:b9:28:e0:b4:14:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:1D:C8:BE:15:0E:49:08:91:E2:79:7A:42:53:B8:F7:8B:DE:BE
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Wp4dyL4VDkkIkeJ5ekJTuPeL3r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cd40::/29
2a13:d340::/29
2a13:d840::/29
2a13:df40::/29
2a13:e140::/29
Signature Algorithm: sha256WithRSAEncryption
01:d4:93:85:20:ac:16:f2:03:7b:d2:c9:e8:c9:3f:5a:d4:01:
9a:eb:a6:0f:13:77:28:5c:47:38:fb:99:27:e4:48:ae:20:e4:
c2:e0:8f:2e:da:82:bb:8b:df:42:db:12:7c:e2:90:71:af:6b:
28:50:96:b4:97:30:9b:1c:d2:2e:91:a8:79:1d:57:fc:13:69:
0d:24:1c:ab:5c:68:2b:1e:d9:ba:27:31:53:e5:3d:d4:e9:68:
a9:c8:9a:0a:6b:87:a7:7e:84:7a:08:7b:88:cf:41:79:bc:a4:
da:95:bb:5c:1b:09:d4:48:2e:22:31:8d:ac:cc:db:b5:42:2d:
40:20:f7:20:65:8e:2f:cf:f3:c4:5a:c7:84:9d:71:3a:4a:0a:
3f:b0:73:13:b2:ca:08:59:d7:57:bd:79:7d:57:df:fb:3a:10:
08:c3:dc:4a:05:da:9c:c4:c0:33:25:cb:0a:47:1b:78:6b:99:
d0:ec:a6:38:5b:91:6c:b3:b5:d4:b5:fa:cc:95:e2:89:6b:56:
12:b0:a5:e0:ae:6c:ac:01:71:53:54:e8:77:9f:db:a2:89:52:
95:65:63:b5:b3:b2:69:b4:64:6f:c8:0f:9e:e1:bb:66:14:b8:
4e:40:b0:31:5e:f4:29:2f:82:18:d3:1e:df:f4:47:22:8a:7b:
d2:19:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:37:16 2025 by rpki-client